Cisco Elastic Services Controller
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0130 | Cisco Elastic Services Controller | A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an u | CRITICAL 9.8 | 1.9 % | ||
| CVE-2018-0121 | Cisco Elastic Services Controller | A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allo | CRITICAL 9.8 | 2.5 % | ||
| CVE-2018-0106 | Cisco Elastic Services Controller | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access | LOW 3.3 | 0.3 % | ||
| CVE-2017-6713 | Cisco Elastic Services Controller | A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain ful | CRITICAL 9.8 | 2.9 % | ||
| CVE-2017-6712 | Cisco Elastic Services Controller | A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges | HIGH 8.8 | 2.0 % | ||
| CVE-2017-6697 | Cisco Elastic Services Controller | A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-6696 | Cisco Elastic Services Controller | A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sens | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-6693 | Cisco Elastic Services Controller | A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access i | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-6691 | Cisco Elastic Services Controller | A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive inf | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-6689 | Cisco Elastic Services Controller | A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affecte | HIGH 8.8 | 1.5 % | ||
| CVE-2017-6688 | Cisco Elastic Services Controller | A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the L | HIGH 8.8 | 2.3 % | ||
| CVE-2017-6684 | Cisco Elastic Services Controller | A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the L | HIGH 8.8 | 2.3 % | ||
| CVE-2017-6683 | Cisco Elastic Services Controller | A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute | HIGH 8.8 | 5.9 % | ||
| CVE-2017-6682 | Cisco Elastic Services Controller | A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary comman | HIGH 8.8 | 2.2 % |